This is a case study based on a student submission that is known to have been completed by a contract writer. Digital forensics techniques were employed to ascertain whether or not such techniques can be used to identify that contract cheating has taken place. The authors found a number of features which suggest strongly that work is not original, and highlight areas for further development and research.